I have spent some time this past day to investigate NodeJS source code and how a typical process tree from a react/next.js app will look like.
If you are building detections for React2Shell give this a read. as it'll help you identify the right strings to use to filter down FPs and what anomalous look might like.
https://t.co/pSSYRFir6O
@coffinxp7 Brother, some time ago I made this tool for when you're targeting a large number of subdomains. The idea was to create a fast tool for discovery.
https://t.co/7CEgnOrwuy
#bugbounty#hacking#cybersecurity
After going through all the comments and questions about setting up IDN domains and using Punycode based emails, I finally made a video that covers everything step by step. Iโm confident this will help many of you land some serious bounties!
https://t.co/EcGMaLGlbP
This #NahamCon2025 talk has generated over $50,000 in bounties for @YShahinzadeh and a few other hackers: Puny-Code, 0-Click Account Takeover.
๐ฅ๐๐ผhttps://t.co/BsVhu4Vold
Want to master client-side bugs? ๐
Check out this extensive GitHub repository with tens of different resources curated by @zomasec!
๐ https://t.co/9PULUiwZvp
๐Monthly Giveaway๐
Hack The Box 6-month VIP+
- Follow, Like, and Retweet to join!
- Winners will be picked randomly on 5 June.
#hackthebox#giveaway#projectsekaictf
๐ฅ ๐๐ ๐๐๐ ๐๐๐๐ฆ๐ข๐ง๐ ๐๐ฅ๐๐ฒ๐ ๐ซ๐จ๐ฎ๐ง๐ ๐๐๐๐ฌ from @Microsoft
12 free labs to up-level your hacking skills from the โAI Red Teaming in Practiceโ Black Hat training, covering:
- Credential exfiltration
- Extracting a secret from the metaprompt
- Indirect prompt injection
- and more!
Super cool that this was open sourced, huge shout-out to Dr. Amanda Minnich (AIRT), Gary L., Martin Pouliot, and anyone else involved ๐
๐ https://t.co/LVNZX4LDFQ
Want to quickly and easily import BChecks and Bambdas to your library?
๐ Check out Extensibility Helper on the BApp Store!
๐ Pull scripts directly from the PortSwigger community repositories, or provide your own for a custom store experience.
Built a Burp Suite extension to run SQLmap directly from the GUI.
No more saving HTTP requests + jumping to terminal.
Just:
โ Mark param with *
โ Right-click โ Send to SQLmap
โ Pick options โ Run
Linux-only for now. Windows support coming soon.
Full write-up: https://t.co/TqTfwOdWk3
#BurpSuite #SQLmap #CyberSecurity #BugBounty #RedTeam #infosec